struct _FS_FILTER_CALLBACK_DATA// Size=0x24
{
    unsigned long SizeOfFsFilterCallbackData;// Offset=0x0 Size=0x4
    unsigned char Operation;// Offset=0x4 Size=0x1
    unsigned char Reserved;// Offset=0x5 Size=0x1
    struct _DEVICE_OBJECT * DeviceObject;// Offset=0x8 Size=0x4
    struct _FILE_OBJECT * FileObject;// Offset=0xc Size=0x4
    union _FS_FILTER_PARAMETERS Parameters;// Offset=0x10 Size=0x14
};